Analysis
-
max time kernel
179s -
max time network
183s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 18:26
Static task
static1
Behavioral task
behavioral1
Sample
86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe
Resource
win10v2004-20220812-en
General
-
Target
86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe
-
Size
938KB
-
MD5
b15cc0db483063d7ea97a5d96f866529
-
SHA1
4b20b5d516a547bb12faf7dc727b781e7623d70a
-
SHA256
86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5
-
SHA512
a0bd7241ae6a30f30e4a3430333c50587a122ad13e27e24bd19a893823233929683e1008d6286bafcde433a4a9c6b7e174a718a8e4b7e31fe9e0f32e4ac3140b
-
SSDEEP
12288:usXfpw7AmvaATYzi7P8eaWqNg269EIeKTzw31P40VbPUjHNLP4u3vZxWEXwpEvPH:uge7aATEi4eBf269EI1mX41P3PWBxi
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 30 IoCs
pid Process 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2160 86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe"C:\Users\Admin\AppData\Local\Temp\86848f270ff0e61e2f89c647836433d57e1a6cc948e89fdf9ab838e9f4266ec5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:2160